Use this task to create a custom ICMP or ICMPv6
application and then create a security policy rule to allow or deny
that application.
Create a custom application for ICMP or ICMPv6
message types and codes.
Select
Object
Applications
and
Add
a
custom application.
On the
Configuration
tab, enter
a
Name
for the custom application and a
Description
.
For example, enter the name ping6.
For
Category
, select
networking
.
For
Subcategory
, select
ip-protocol
.
For
Technology
, select
network-protocol
.
Click
OK
.
On the
Advanced
tab, select
ICMP
Type
or
ICMPv6 Type
.
For
Type
, enter the number
(range is 0-255) that designates the ICMP or ICMPv6 message type
you want to allow or deny. For example, Echo Request message (ping)
is 128.
If the Type includes codes, enter the
Code
number
(range is 0-255) that applies to the
Type
value
you want to allow or deny. Some
Type
values
have Code 0 only.
Click
OK
.
Create a Security policy rule that allows or denies the
custom application you created.